Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
File:                     25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json)
Hash identifier:          CzUdbKA4AH8swCznmSGvNSQ1keEvMI828DYcBviUaxE=
Subject key identifier:   DC:F2:73:2D:E2:6B:B1:59:28:D9:89:02:93:D0:E5:49:D5:D5:48:3F
Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12
Certificate issuer:       /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
Certificate serial:       1DD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
Manifest number:          1DC2
Signing time:             Wed 20 May 2026 16:06:02 +0000
Manifest this update:     Wed 20 May 2026 16:06:01 +0000
Manifest next update:     Wed 27 May 2026 16:06:01 +0000
Files and hashes:         1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: yf49xLjYSjdX2yGq8unAhrhLrThdSHVs6E++wRJ4K9k=)
                          2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: bYaDtLZITXZD32x/G/ifQ4D5B/vhmcgFX9IrYx2NC+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl
                          rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7632 (0x1dd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512
        Validity
            Not Before: May 20 16:06:01 2026 GMT
            Not After : May 27 16:06:01 2026 GMT
        Subject: CN=6a0ddbea-5e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:da:f4:43:98:2b:46:88:9d:fa:0c:0b:ee:57:
                    36:7e:24:41:59:e8:d3:d5:1e:37:d9:3f:47:b5:a6:
                    23:0a:7f:c8:7c:44:d0:d1:f0:3a:a5:ca:77:39:36:
                    99:34:30:2d:74:f6:00:41:7a:58:4a:cf:23:fd:3d:
                    41:58:b4:ec:a9:a9:1b:dc:89:de:b1:29:22:cd:c9:
                    59:81:05:0e:62:e8:c7:1a:ed:7e:cb:1b:88:9c:e3:
                    ce:ae:cc:ab:01:67:c2:8b:29:29:d1:f1:1d:6d:64:
                    c1:d5:87:b6:b2:16:70:11:63:62:d7:e4:c7:bc:33:
                    2d:ba:1c:97:3e:9f:ab:9c:c5:8f:20:18:02:05:b7:
                    f3:5f:56:94:a6:b3:d6:ef:4d:11:65:5b:4a:ec:2f:
                    a2:bc:69:22:8a:70:ad:0e:41:e6:fd:28:33:87:23:
                    e1:9a:5d:57:4e:7f:a4:19:e4:f3:1d:d6:13:23:d7:
                    97:bd:0d:d4:3b:08:dc:5c:f1:0a:e8:2b:95:68:7e:
                    a6:59:8d:b0:9d:84:a8:19:24:13:05:cc:d7:3c:29:
                    52:ef:0d:3e:b1:98:fe:f5:c6:aa:a1:28:21:6d:4e:
                    4b:2e:6e:58:ae:64:c4:2d:0c:7b:d7:79:00:d9:72:
                    9a:1f:91:30:af:ff:3f:61:ea:5c:8f:d1:d0:b6:86:
                    d0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F2:73:2D:E2:6B:B1:59:28:D9:89:02:93:D0:E5:49:D5:D5:48:3F
            X509v3 Authority Key Identifier:
                keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:37:e4:0e:4f:7f:7b:2b:6b:f9:0c:74:bb:a6:2a:cf:10:b8:
         34:6a:f9:f6:a4:57:62:ce:25:1d:d4:81:6c:3c:d7:ba:f4:33:
         07:02:4f:30:29:17:d7:f5:72:af:5b:1a:ec:32:bb:aa:20:e0:
         fb:22:e0:26:b7:c2:be:f5:04:38:bb:ba:27:cf:3e:16:04:55:
         25:48:7b:47:53:77:53:eb:cd:37:48:62:ac:bb:bb:bd:72:7e:
         a4:04:70:40:44:73:34:b2:56:2f:0a:ff:95:bc:51:a7:f2:dd:
         aa:c0:23:ce:e5:4d:51:7d:6e:3b:74:4a:40:23:16:b0:62:c6:
         e0:57:1c:75:84:cb:74:21:1e:66:a7:0b:86:1d:ea:11:53:27:
         17:e8:9a:2f:e2:4a:76:aa:bb:c8:67:f2:8a:78:07:6f:07:40:
         30:fc:dd:d0:eb:19:57:0a:fe:80:aa:15:c9:8b:5d:ae:90:25:
         a7:f5:3d:df:10:33:4e:39:77:b6:d2:a8:f2:8b:06:5a:54:98:
         0d:56:aa:05:e0:e0:86:80:3c:da:cf:c1:c1:de:ea:e9:4f:fe:
         52:43:70:b3:e3:52:8b:06:24:c2:0c:e8:e6:72:6a:e4:64:3f:
         ef:ea:f9:61:48:7f:ae:85:55:62:9f:bb:54:8d:ca:fa:36:24:
         4d:c8:f1:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3
NTIyNjM1MTIwHhcNMjYwNTIwMTYwNjAxWhcNMjYwNTI3MTYwNjAxWjAYMRYwFAYD
VQQDEw02YTBkZGJlYS01ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqdr0Q5grRoid+gwL7lc2fiRBWejT1R432T9HtaYjCn/IfETQ0fA6pcp3OTaZ
NDAtdPYAQXpYSs8j/T1BWLTsqakb3InesSkizclZgQUOYujHGu1+yxuInOPOrsyr
AWfCiykp0fEdbWTB1Ye2shZwEWNi1+THvDMtuhyXPp+rnMWPIBgCBbfzX1aUprPW
700RZVtK7C+ivGkiinCtDkHm/SgzhyPhml1XTn+kGeTzHdYTI9eXvQ3UOwjcXPEK
6CuVaH6mWY2wnYSoGSQTBczXPClS7w0+sZj+9caqoSghbU5LLm5YrmTELQx713kA
2XKaH5Ewr/8/Yepcj9HQtobQXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzycy3i
a7FZKNmJApPQ5UnV1Ug/MB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC
NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkQ1Qi8xNzAyRkMzRUJCNjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVE
a05ha1RtcnRWNmQxSW1OUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPjfkDk9/eytr+Qx0u6YqzxC4NGr59qRXYs4lHdSBbDzXuvQzBwJPMCkX1/Vy
r1sa7DK7qiDg+yLgJrfCvvUEOLu6J88+FgRVJUh7R1N3U+vNN0hirLu7vXJ+pARw
QERzNLJWLwr/lbxRp/LdqsAjzuVNUX1uO3RKQCMWsGLG4FccdYTLdCEeZqcLhh3q
EVMnF+iaL+JKdqq7yGfyingHbwdAMPzd0OsZVwr+gKoVyYtdrpAlp/U93xAzTjl3
ttKo8osGWlSYDVaqBeDghoA82s/Bwd7q6U/+UkNws+NSiwYkwgzo5nJq5GQ/7+r5
YUh/roVVYp+7VI3K+jYkTcjxsQ==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:05 2026 by rpki-client